Topic starter
23/10/2026 12:45 am
TL;DR: Hypernative details that FinCEN’s September 2026 analysis shows digital asset scams are still being identified after funds leave, with U.S. victim losses rising from $907 million in 2021 to $7.2 billion in 2025. Institutions need pre-transaction decisioning, because after-the-fact review cannot stop a transfer once it has cleared.
Editorial analysis by NHI Mgmt Group, based on content published by Hypernative: “FinCEN crypto scam report: stopping fraud before withdrawal”.
Key questions
Q: Why do customer-authorised scams require different controls than phishing?
A: Phishing defence tries to stop an action the user did not intend.
Q: How do banks know if their fraud controls are actually working?
A: They should test whether suspicious transactions are declined or challenged in real time, whether payee verification stops redirection attempts, and whether risky sessions are suspended when the runtime environment changes.
Q: What breaks when fraud controls only work after a transfer is completed?
A: Post-transaction controls can explain losses, support filings, and improve investigations, but they cannot stop the customer-authorised transfer that already left the platform.
Practitioner guidance
- Map the withdrawal decision point Identify the exact step where a digital asset transfer can still be denied before settlement, and make that the control boundary for fraud prevention.
- Score destination risk in real time Add a destination risk decision to the existing authentication, limits, and AML sequence so the platform can stop suspicious payouts in flow.
- Use cluster-based detection Prioritise controls that analyse wallet relationships, funding paths, and cross-chain behaviour instead of relying only on known bad-address lists.
Bottom line: Digital asset fraud prevention fails when institutions rely on after-the-fact investigations instead of controls that act before execution.
Glossary terms: Authorised Push Payment Fraud, Transaction-Time Decisioning, Network-Based Fraud Detection, Prevented Value
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 6 days ago by NHI Mgmt Group
23/10/2026 9:49 am
The core failure here is not fraud detection, it is control timing. Institutions have spent years building systems that document suspicious activity after execution, but that is the wrong operating model for authorised scams and digital asset withdrawals. The decisive governance gap is the absence of a transaction-time intervention point that can stop value while it is still inside the customer account. Practitioners should treat pre-transaction decisioning as a first-class control, not an enhancement.
A few things that frame the scale:
- U.S. fraud losses are projected to reach $40 billion by 2027.
A question worth separating out:
Q: Who should own real-time fraud interdiction in a digital asset platform?
A: The payment or digital asset institution owns the last safe decision because it controls the transaction gates, limits, and execution path. Fraud, compliance, and operations may all contribute, but ownership has to sit with the team that can actually stop the transfer. If no group owns that boundary, the platform defaults to after-the-fact review.
👉 Read our full editorial: Fraud prevention shifts from after-the-fact review to pre-transaction control
This post was modified 6 days ago by NHI Mgmt Group